MaraDNS changelog

<p>maradns-1.0.23:

Changes from 1.0.22:

- Corrected error where askmara incorrectly outputted MX records
- MaraDNS can now resolve star records when processing ANY queries
- The RD value in replies is now the same as the RD in the corresponding
    query
- Fixed some typos in old changelog entries

(2004.05.28)

<p>maradns-1.0.22:

Changes from 1.0.21:

- Applied Juergen Daubert's patch that makes MaraDNS compile clean, even
    with all warnings enabled.
- Added testing for the zoneserver to the SQA suite
- Fixed a problem where the zone server would die after serving MAXFD
    zones.

(2004.05.25)

<p>maradns-1.0.21:

This is MaraDNS 1.0.20 with a patch that solves an error one user reported
with the parsing of zone files.
<p>
(2004.04.13)

<p>maradns-1.0.20:

This is MaraDNS 1.0.18 with a patch to allow gnu.org to resolve again.  This
is the "no frills, just stay stable" branch of MaraDNS.
<p>
(2003.10.02)

<p>maradns-1.1.18:

This is simply a new release which indicates my decision to completely
rewrite the recursive portion of MaraDNS.  The old recursive code is
removed; I hope to have time to work on the new recursive code soon.
<p>
(2003.10.02)

<p>maradns-1.0.19:

This is a test release which addresses a number of issues people on the 
list have brought up:

-  Doug Sampson a pointed out that the server gives out compression errors
    and freezes.  I have replaced the compression code with the cleaner
    compression code from the 1.1.xx branch; this will hopefully address
    this issue.
-  Andrew pointed out that the zoneserver does not give out adequate
    error messages when there is a problem opening up a zone file, or when
    there is a fatal parse error in a zone file.  I have added appropriate
    error messages to the zone server.
- Juergen Daubert provided a patch to make Mara's compile generate less
    warnings.  
- A problem with the ORSC entries being out of date was brought up.  I can
    not look up the current entries (being offline), but have changed all of
    the example files to use the ICANN entries by default, since ICANN is 
    the only root server registry who has root servers with stable enough 
    IPs for "set and forget" environments.
- I myself found some problems where timeouts for PTR and AAAA queries can
    slow down poorly-written clients.  As a result, MaraDNS now has the
    ability to optionally instantly give dummy "not there" replies to 
    either PTR or AAAA queries (or both).
- Some minor updates and clean-up to the documentation.

(2003.08.03)

<p>maradns-1.1.17:

Recursive queries now work again; fixed a place which was using a 32-bit
value to get a timestamp, when the code in question should have used a
josa_timestamp (64-bit) value.
<p>
Additionally, it is now possible to use this program as a non-root user
again.
<p>
(2003.06.13)

<p>maradns-1.0.18:

Cleaned up and fixed a bug in the MaraDNS startup script.  Now, the only 
prorcesses that will be killed will be bona fide MaraDNS processes.
<p>
(2003.05.30)

<p>maradns-1.0.17:

Strnlen seems to not be a portable call after all (the BSDs don't have it);
this version has a special js_strnlen call to make up for this.
<p>
(2003.04.18)

<p>maradns-1.0.16:

This is MaraDNS 1.0.15 declared "stable" (well, as stable as 1.0.13).  The
only change from 1.0.15 is more debugging information in case an
unreproducable bug which one user reported pops up again.
<p>
(2003.03.16)

<p>maradns-1.0.15:

This is MaraDNS 1.0.14 with a good deal more stress testing done to
the recursive resolver.  There does not appear to be any obvious memory 
leaks; nor are there any stability issues with this release of MaraDNS.
That said, I am, at present, marking the release "beta" until there is
more field testing of the release.
<p>
(2003.02.28)

<p>maradns-1.0.14:

This is not a production release of MaraDNS.  This is a beta-test release
of MaraDNS which has the ptr-over-cname fix from the 1.1.xx branch backported
to the 1.0.xx branch.  In addition, the code has been modified to no longer
use strlen().
<p>
Use this code at your own risk.  While I have stress-tested this code for
stability, this code has not been field tested yet.
<p>
That said, it does fix the long-standing bug with correctly resolving
PTR records which are CNAME referrals.  I want to see some people help
me beta-test this, so that I can make a more general release of this
bugfix available.
<p>
(2003.02.23)

<p>maradns-1.0.13:

This release of MaraDNS is dedicated to the seven brave astronauts
who died this morning on the Columbia space shuttle:

-  Willie McCool 
-  Rick Husband 
-  Kalpana Chawla 
-  Laurel Clark 
-  Michael Anderson 
-  David Brown 
-  Ilan Ramon 

These people
died expanding the boundaries of humanity's next frontier; may
their deaths not be in vain and may humanity eventually conquer space.
<p>
This is MaraDNS 1.0.12 with a one-line bugfix for a bug the last
release of MaraDNS introduced.  This only matters for people who
have zonefiles with no records in them (besides the SOA and NS records
for the domain head).
<p>
(2003.02.01)

<p>maradns-1.1.16:

D Richard Felker III, who knows more about the arcane mysteries of
UNIX pipes than myself, showed me how to get duende to catch the 
stuff sent to standard error also.
<p>
Duende's manual page has been proffread and updated.
<p>
(2003.01.29)

<p>maradns-1.1.15:

I have given up, for now, on trying to catch both stdout and stderr.

<p>maradns-1.1.14:

The daemonizing helper has been renamed 'duende' (Spanish for 'daemon',
consistant with the Spanish theme MaraDNS has, it is said like 'dwen-deh'), 
and now sets up a second child process which syslog()s all of maradns' 
various messages.  Also added new timestamp format with no timestamp
whatsoever to eliminate redundant timestamp when using duende helper.
<p>
(2003.01.27)

<p>maradns-1.1.13:

MaraDNS now has a daemonizing helper which makes MaraDNS a daemon, then
stays around.  If either the daemonizing helper or MaraDNS (even
MaraDNS 1.0.xx) gets a HUP signal, MaraDNS is restarted.  If either
process gets a TERM or an INT signal, both processes exit.  If MaraDNS
exits for any other reason besides a HUP signal, the daemonizer
restarts MaraDNS.
<p>
(2003.01.25)

<p>maradns-1.1.12:

MaraDNS now has her own timestamp code which should get rid of any Y2038
problems; on systems with 32-bit time_t, the problems are pushed forward
to 2112 (and can be pushed forward indefinitely by changing only two
magic constants and recompiling).  Note: This means the code only works on
systems with an int64_t; are there any significant Unix systems deployed
which people may wish to use Mara on without int64 support at this point?
<p>
(2003.01.22)

<p>maradns-1.1.11:

MaraDNS has support for DNS record resurrection; this means that
she can now use expired records if no DNS server can be contacted
for a given host name
<p>
(2003.01.17)

<p>maradns-1.0.12:

MaraDNS with the following seven patches applied:

- Records with CNAMEs should resolve more nicely on slow links 
    (maradns-1.0.11-incomplete.cname.patch)
- Askmara man page updated to say default DNS server address is
    127.0.0.3 (maradns-1.0.11.askmara-man.patch)
- Recursive server no longer wastes time with in-bailiwick glueless
    NS referrals (maradns-1.0.11-bailiwick.patch)
- References to nslookup in the documentation have been removed, or
    changed to note that nslookup is obsolete 
    (maradns-1.0.11.no-nslookup.patch)
- Fixed problem that Ray reported with empty zone files (zone files with
    only SOA and NS records) (maradns-1.0.11-raybug.patch)
- Fixed very slight problem with how the RNG was seeded, should not affect
    most installations of MaraDNS (maradns-1.0.11-rngseed.patch)
- Patch to work around admins who use a dot instead of an @ in the RNAME
    field for SOA record (maradns-1.0.11-soamail.patch)

(2003.01.15)

<p>maradns-1.1.10:

MaraDNS is now able to bind to multiple IP addresses.  In addition, I
have set up a signal handler so that MaraDNS can exit with a return code
of 8 when she gets a HUP signal.
<p>
The way MaraDNS binds to multiple IP addresses is by having a socket for
each IP address, and a select() call which determines which socket 
someone connected to.  Since the select() has a timeout, I was able to
set up the HUP signal handler to only change a global variable.
<p>
Proper HUP signal handling will be handled by a daemonizer wrapper, which
I will write next.
<p>
(2003.01.10)

<p>maradns-1.1.09:

Some improvments to DNS-over-TCP:

- It is now possible to have permission to only forward a query 
over TCP without being able to transfer zone file.
- It is now possible to use an old zoneserver mararc with the new
    zoneserver.
- The feature has now been documented (albeit only sparsely in 
    the mararc man page)

(2003.01.10)

<p>maradns-1.1.08:

It is now possible to use zoneserver to forward TCP DNS queries to a
UDP DNS server; this gives MaraDNS full TCP DNS support.
<p>
(2003.01.07)

<p>maradns-1.1.07:

Not extensively tested, but following CNAMEs to PTR records now works.
<p>
(2002.12.25)

<p>maradns-1.0.11:

This release changes the decompressor so that it works with packets
which some zoneservers with large zone files generate.
<p>
There is also some minor revisions to the documentation.
<p>
(2002.12.17)

<p>maradns-1.0.10:

This release fixes a bug with the RP definition so that the 
decompressor can accept a DNS packet with this RR type.  In other
words, this release resolves the problem Danny saw.
<p>
In addition, I have done some documentation clean-up, fixing the
problems that Christian saw in the documentation; the most significant
change is that the root servers for various root server networks have 
been updated.
<p>
(2002.11.30)

<p>maradns-1.0.09:

This release backports the 1.1.06 improvments to the 1.0.xx branch of
MaraDNS.
<p>
(2002.11.15)

<p>maradns-1.1.06:

This realease updates the FAQ, some other information, and has some
minor cleanups performed to the code.
<p>
(2002.10.24)

<p>maradns-1.1.05:

This release has the same decompression patch which the 1.0.08 release
has.  In addition, this release has the test_zoneserver and test_getzone
tools, just in case anyone ever sees problems with getzone again.
<p>
(2002.10.05)

<p>maradns-1.0.08:

The release fixes the problems which getzone which Marc Schneiders and
Nikos Mavroyanopoulos reported.  I would like to thank both people
for reporting these problems.
<p>
The problems were caused by the fact that the new decompression code 
did not expect the kind of packets which zoneserver generate; I have patched
the new decompression code.
<p>
(2002.10.05)

<p>maradns-1.1.04:

This release incorporates TTL aging, and Jonathan's code which makes
this run as a Win9x service (note: BSD copyrighted code with the
obnoxious advertising clause; we may have to do something about that
before this becomes stable code)
<p>
(2002.09.01)

<p>maradns-1.0.07:

I would like to thank Scott Cooper for working hard to find the cause
of a bothersome crash which people have been reporting for about a 
month.  This release, hopefully, fixes the crashing problem once and
for all.
<p>
In addition, I have put back all of the improvments to the authoritative half
which MaraDNS between 0.9.06 and 1.0.05 had; this version undoes the
reverting I did for 1.0.06 (which I only did because problems started
popping up two days before a two-week vacation I had in México).
<p>
(2002.08.26)

<p>maradns-1.0.06:

Johan is seeing stability problems with MaraDNS' authoritative
half which MaraDNS 0.9.06 does not have; this patch essentially
reverts the authoritative half to what MaraDNS 0.9.06 had.
<p>
This hopefully fixes the stability problems; I am alas in a position
to properly test this.
<p>
(2002.07.30)

<p>maradns-1.0.05:

Simple one-line change which allows MaraDNS to compile on Cygwin.  Calling
this release a "stable" release.
<p>
(2002.07.28)

<p>maradns-1.1.02:

The following improvments over MaraDNS 1.1.01:

- All improvments made for MaraDNS 1.0.04 have been integrated in to the
    development branch.
- A bug which caused MaraDNS 1.1.01 to seg fault has been fixed
- This version of MaraDNS now supports human-readable timestamps

(2002.07.18)

<p>maradns-1.0.04:

MaraDNS 1.0.03 with the following patches:

- Jon's patch which allows any arbitrary size for the debug memory
    allocation checking hash.
- Christian's improved German translations.  
- Franky's improvments to recursive.c
- Richard's changes which allow MaraDNS to compile on Cygwin (again)

(2002.07.14)

<p>maradns-1.1.01:

The first (real) release of the new development tree.  This is MaraDNS
1.0.02 with a new license (simple BSD-style license which will hopefully
attract developers scared off by the "Public Domain opens you up to 
lawsuits" FUD) and a newly rewritten compression engine.  
<p>
(2002.07.14)

<p>maradns-1.0.03:

Franky's second release. This contains the following improvements:

- Removed the thread limit of 125 (changed it to 500
    because a limit is always needed)
- Removed the Solaris-refuses-to-run-recursive limitation
- Changed the locking scheme; all memory leaks seem to vanish using
    the new scheme.
- Fixed some minor memory leaks

(2002.07.12)

<p>maradns-1.0.02:

This is a release of my own.  This 1.0.01 with the following changes:

- An audit was done on the decompression code.  While no exploitable
    security problems were found, some clean up to make things more
    consistent was done.
- A patch which tells us the IP from which a packet the decompresser
    didn't like was sent.
- A patch which shows us the packet before decompressing it at a
    sufficiently high log level.
- A patch which fixes a bug when the last record in the DNS packet
    had a rdlength of 0; the decompressor previously erroneously rejected 
    these packets.

(2002.06.30)

<p>maradns-1.0.01:

This is Franky's first release.  Mainly, some more minor memory leaks
plugged.
<p>
The only changes I made were some touch ups to the documentation, and
added a copy of Franky's GPG key signed with the MaraDNS signing key.
<p>
(2002.06.26)

<p>maradns-0.5.33:

Now that 1.0.00 is released, I am deprecating the 0.5.xx branch. 
The only updates to this branch will be to fix bugs worth disclosing
on Bugtraq.  In other words, security bugs.
<p>
If anyone wants to maintain this branch of MaraDNS, let me know.
<p>
This release back ports some cleanup I did with dns/Queries.c which
also applies to the 0.5.xx branch.
<p>
(2002.06.21)

<p>maradns-1.0.00: (released as close to 2002's solstice as possible)

It's here.  Happy solstice everyone!
<p>
MaraDNS 0.9.92 with the following patches:

- Yet another memleak patch
- Patch which properly initializes the header data structure
- Franky patch (modified) to fix things up
- Neale's maragen added to the tree

(2002.06.21)

<p>maradns-0.9.92: (1.0 release candidate 2)

<p>
MaraDNS 0.9.91 with the following patches:

- Neale's patch which fixes a small problem in the install.sh script
- Franky's patch which fixes up the locks
- My patch to a possible memory leak that Franky found

(2002.06.15)

<p>maradns-0.9.91: (1.0 release candidate 1)

<p>
MaraDNS 0.9.39 with the following patches:

- Franky's patch which fixes a problem with the thread locking
    (The "Small Fix" patch)
- Patch which fixes the recent rcode problems
- Patch which limits the number of threads to 125
- Patch which removes compile-time warnings
- Patch which adds note in documtation that MaraDNS doesn't
    handle in-bailiwick glueless NS referrals very well.

(2002.06.12)

<p>maradns-0.9.39:

<p>
MaraDNS 0.9.38 with the following patches:

- Franky's patch which reworks some of the locks.  Seems to mimimize
    the thread overlap problems.
- Patch which warns us if we unlock when there is no thread locked.
- Patch which plugs a memory leak in Decompress.c.

(2002.06.10)

<p>maradns-0.9.38:

<p>
Added code to check the pthread locking status and to exit if
it doesn't return a sucessful exit code.
<p>
Removed timestamp format which allows us to see the PID; this
was only needed for debugging purposes.
<p>
Added comment in the MaraDNS source explaining why 200 is 
a reasonable maximum number of threads; that is about how
many simutanious threads the underlying pthread library
can handle.
<p>
(2002.06.08)

<p>maradns-0.9.37:

<p>
This is MaraDNS 0.9.36 with the following patches:

- maradns-0.9.36.dotafter.patch: Fixes problems with the "dot after .com"
- maradns-0.9.36.decompress.patch: Fixes problems decompressing
TXT records
- maradns-0.9.36.cleanup.patch: Clean up recursive code; stops 
potential release of lock
- maradns-0.9.36.bind.patch: MaraDNS now tries 10 times to bind to
a port; should make her handle medium-to-high loads better
- maradns-0.9.36.showpid.patch: Gives new option to show_timestamp
to show the process ID.

Also: Minor doc change (to document the new timestamp format); 
updated RPM spec, changelog, and download page
<p>
(2002.06.07)

<p>maradns-0.9.36:

<p>
The new decompression code now works.  Enabling it so people can 
test it.
<p>
(2002.06.05)

<p>maradns-0.9.35:

<p>
Improved RPM spec files
<p>
The new decompression code is finished, but is not fully debugged yet (so it
is disabled for this release).  
<p>
Code cleanups which should resolve the infinite loops Franky is seeing
<p>
(2002.06.04)

<p>maradns-0.9.34:

<p>
Yet another debug release; numerous small bug fixes and cleanups.
MaraDNS now builds correctly when the locale of outputted messages
is set to Spanish or German again.  A bug where MaraDNS would crash
in a certain very unusual case has been fixed.
<p>
(2002.05.31)

<p>maradns-0.9.33:

<p>
Another debug release; numerous small bug fixes.  The most notable
is the plugging of what appears to be the last memory leak in
the recursive code; hopefully all I have to do for 1.0.00 at this
point is the new decompression code and the release candidates.
<p>
(2002.05.21)

<p>maradns-0.9.32:

<p>
Another debug release; the code which keeps track of unallocated memory 
has been redone.  Now memory leak tracking causes a minimum of slowdown
when running MaraDNS; and the code works again.
<p>
In addition, some minor touchups have been done to the code.
<p>
(2002.05.19)

<p>maradns-0.9.31:

<p>
Begin work on new decompression code (still using old decompression code
until new code is complete)
<p>
Fixing open socket leaks in recursive code, and case-sensitivity issues 
in the askmara code.
<p>
(2002.05.18)

<p>maradns-0.9.30:

<p>
Another bug fix release: Fixed bug where RRs with obscenely long TTLs
would "wrap around" and end up having a negative TTL (causing the record
to be promptly erased from the cache).  Now the maximum TTL is two years
long.
<p>
Added a little more in the way of debugging messages to try to get
to the bottom of the temporary freeze-ups that Franky is seeing.
<p>
(2002.05.17)

<p>maradns-0.9.29:

<p>
Bug fix release: Fix bug where hosts that were in bailiwick were, at times,
rejected as being out of bailiwick.
<p>
(2002.05.15)

<p>maradns-0.9.28:

<p>
Added new level of verbosity, 4, which records every time we add or remove
a record from the cache
<p>
(2002.05.13)

<p>maradns-0.9.27:

<p>
timestamp_type feature added; it is now easy for people
to add new timestamp types; this seems to be a popular
request ever since MaraDNS had added timestamps.
<p>
(2002.05.10)

<p>maradns-0.5.32:

<p>
Backport of fixes to compression code to the 0.5.xx branch.
<p>
(2002.05.10)

<p>maradns-0.9.26:

<p>
Hot fix: The compression code was completely broken in MaraDNS 0.9.25
because I accidently made an integer which needs to be signed 
unsigned.  Fixed.
<p>
(2002.05.09)

<p>maradns-0.9.25:

<p>
Bug fix: I finally have gotten to the bottom of the compression problems
MaraDNS was having with news.com.com; this release fixes the problems,
hopefully once and for all.
<p>
I also have a document which describes some of the function calls
the new decompression code will have.
<p>
(2002.05.09)

<p>maradns-0.9.24:

<p>
Bug fixes: 

- DNS records with a TTL of less than 30 seconds now have a
visible TTL of 30 seconds.  This is to work around stub resolvers (such
as Mozilla's stub resolver) which can not resolve RRs with extremely
short TTLs.
- Lines which are too long in mararc files now return a properly formatted
error message.

I have begun work on the new decompressor; however no changes have been
made to the actual compression code yet.  However, there are now
documents that specify how the new decompression will work and header
files which the new decompression code will use.
<p>
(2002.05.08)

<p>maradns-0.9.23:

<p>
Bug fix: The mara.startup script now points to the same file location
as the default install.location.  Note that the startup script needs
to be changed if moving the install location.
<p>
Updated spec and patch file to build RPM for the current MaraDNS
build; it has been too long since the last RPM release.
<p>
Trivia: Cinco de Mayo celebrates a battle that Mexico won in 1862
in Puebla, Mexico (I visited the site of the battle several times
when I was down there; it is a beautiful eucalyptus forest, having a 
beautiful fountain and planetarium) against the French.  As it turned out, 
the French won the war, but Mexico won that one battle, which has been 
celebrated since then.  Also, with the exception of Puebla, Cinco de 
Mayo is not a big holiday in Mexico; only in the US.
<p>
(2002.05.05; Cinco de Mayo)

<p>maradns-0.9.22:

<p>
Created list of issues to be resolved before the 1.0 release of MaraDNS;
once these are done, I will start a 0.99.x branch; which I will
publically announce.
<p>
Added kludge to work around unreproducable problems where the
compressor can not always compress a DNS packet
<p>
Added link to glassary entries in the tutorial every time the
tutorial intoduces a new term.
<p>
(2001.05.04)

<p>maradns-0.9.21:

<p>
Fixed bug where the minimum TTL for CNAME entires could not be
separately set.
<p>
Added stub resolver which generates unix timestamps as bogus A
records; used for testing.
<p>
Added FAQ entry about MaraDNS' time stamp format.
<p>
(2002.05.02)

<p>maradns-0.9.20:

<p>
Changed udperror so that it will tell us from where udperror was called;
this will hopefully help me fix the news.com.com problems MaraDNS is
having.
<p>
Added time stamp
to some logged requests and added source IP
logging.
<p>
Added the ability for a remote query to get MaraDNS' internal timestamp;
this is only enabled at obscenely high levels of debug_msg_level, since
it is a security risk (there are attacks which are more effective if we
know the target's clock value).
<p>
Minimum TTL and Minimum TTL for CNAME records is now user-customizable.
<p>
(2001.04.24)

<p>maradns-0.9.19:

<p>
Added download.html to maradns.org web pages which are converted here;
this allows the pages which change most frequently on maradns.org to
be changed offline.
<p>
Added FAQ Q&A about a problem that someone was having; hopefully the
next user with the problem will be able to use this information.
<p>
Added incomplete ej2dbk converter which converts from ej to docbook.
This is incomplete; after MaraDNS 1.0 I will add code which closes open
tags and what not so the generated docbook is 100% legal.
<p>
(2001.04.16)

<p>maradns-0.9.18:

<p>
Fixed a bug in askmara where non-ASCII characters were not properly replaced
by escape sequences.
<p>
Updated EJ documentation tools so that they can now generate webpages
in the same format as the web pages on www.maradns.org.
<p>
(2002.03.25)

<p>maradns-0.9.17:

<p>
Added a minor new feature (since it was trivial to add, and since it is a
feature which greatly expands the functionality that MaraDNS has): 
upstream_servers.  This allows MaraDNS to be used to contact
other recursive servers when run in recursive mode.
<p>
Further bugfixing and revision of the debug.hostname tool; it now will 
not get stuck in endless loops trying to resolve a given hostname.
<p>
(2002.03.14)

<p>maradns-0.9.16:

<p>
Converted encoding of all files in the MaraDNS source tree from ISO 8859-1
to UTF-8 (with the exception of one file in the utf8 directory which is
supposed to be ISO 8859-1 data).  Fixed EJ tools so that they can work 
on a current (as of early 2002;
RedHat 7.2) Linux system using the UTF-8 encoding without undue hassle.
<p>
Fixed bug in debug.hostname where it would not resolve host names in certain
circumstances.
<p>
(2002.03.12)

<p>maradns-0.9.15:

<p>
Added '-n' option to askmara so askmara can send the same kinds of DNS
queries that recursive DNS servers send out (DNS queries that do not ask
for recursion)
<p>
Fixed bug where 'make install' would overwrite /etc/rc.d/init.d/maradns
<p>
Changed maxprocs limit to 200 and made it so exceeding maxprocs does not
cause MaraDNS to stop; instead maxprocs is reset to 200.
<p>
(2002.03.06)

<p>maradns-0.9.14:

<p>
Rewrote debug.hostname tool; this will allow me to set up the testbed
to find the more obscure MaraDNS bugs.
<p>
(2002.03.03)

<p>maradns-0.9.13:

<p>
Fixed bug where debug_msg_level could only be changed if recursion was
enabled.
<p>
Changed stress testing simulation to simulate network lag in processing
DNS replies.
<p>
Made maxprocs have a hard limit of 100; making maxprocs have a value of 400
results in MaraDNS hanging on Linux systems.
<p>
(2002.02.25)

<p>maradns-0.9.12:

<p>
Cleanups performed so that all files to be audited to be compiled with
-Wall enabled without generating any warnings.
<p>
Fixed ej2txt so that it no longer generates utf-8 quotes.
<p>
(2002.02.19)

<p>maradns-0.9.11:

<p>
Fixed bug where CNAME records obtained from the cache would not work
with stub resolvers, since the code changed the question in the question
section of the reply.
<p>
'make debug' now works again.
<p>
(2002.02.11)

<p>maradns-0.9.10:

<p>
Fixed bug of case where there is a CNAME record, and something happened
when trying to get an A record for the CNAME record.  Previously, MaraDNS
would think the CNAME record had no A record until the CNAME record was
purged from the cache.  Now, MaraDNS is smart enough to store CNAME
records with an A record of "a 'no such host' reply was found when we 
looked for an A record"; and CNAME records without any corresponding A
record only stay in the cache for 30 seconds.
<p>
If data is already in the cache for a given record, and the data has not
expired, then there is no need to spawn a thread to process the record;
now MaraDNS no longer does this.  This should result in greater stability
and less memory usage, since many operating systems do threads poorly.
<p>
askmara now can have a user-defined timeout
<p>
compile flags changed from -g to -O2
<p>
(2002.02.11)

<p>maradns-0.9.09:

<p>
Added data_structures.ej document, which describes the internal data
structures that MaraDNS uses.
<p>
Updated the mararc man page to describe the new debug_msg_level 
variable
<p>
Added files needed to make MaraDNS RPM files in the build/ directory.
<p>
(2002.01.27)

<p>maradns-0.9.08:

<p>
Fixed another bug in the ej2man script; it now correctly zaps blockquotes
inside ul.../ul lists.
<p>
Made changelog an ej-compatible document; this allows the changelog
to be an ASCII text file instead of an HTML file which a lot of
UNIX-heads will prefer.
<p>
Verified that MaraDNS 0.9.07 compiles on Darwin (a.k.a. Mac OS X) "out of
the box"; this means that MaraDNS now compiles "out of the box" on
Solaris; Linux; and Darwin.  It also should compile on Cygwin; alas
I do not have a working cygwin setup to verify this on.  Between these four
OSes, we cover all of the major flavors of UNIX: Linux is a little
of everything; Solaris is a "System V" UNIX; Darwin is a BSD UNIX clone;
and Cygwin is a pure POSIX implementation.
<p>
(2002.01.25)

<p>

<p>maradns-0.9.07:

<p>
Added new runtime parameter which can be seen when debug messages are 
enabled: The number of elements in the DNS cache.
<p>
Added Makefile template which is a generate Makefile for systems which
do not have flock() support; make this Makefile the default
Makefile (instead of the Linux Makefile).
<p>
(2002.01.24)

<p>

<p>maradns-0.9.06:

<p>
Fixed bug in maradns startup script where the script would not correctly
restart the MaraDNS processes.
<p>
New mararc parameter added: debug_msg_level; this sets the level of 
information we can get about a running MaraDNS process by sending special
DNS queries to MaraDNS.
<p>
(2002.01.23)

<p>

<p>maradns-0.9.05:

<p>
Revamping of the build process; placing most build-related files in a 
directory named "build"; MaraDNS now compiles and installs cleanly on
Solaris; MaraDNS now has a system startup script which MaraDNS invokes at
system startup time.
<p>
(2002.01.21)

<p>

<p>maradns-0.9.04:

<p>
Another documentation fix.  Added new EJ tag: DTWIDTH
<p>
This version now compiles on Solaris; and should compile on Darwin.
<p>
(2002.01.18)

<p>

<p>maradns-0.9.03:

<p>
Integrated Christian's spelling corrections and German translations in
to the MaraDNS documentation.
<p>
Minor bugfixes with the ej2man script.
<p>
(2002.01.17)

<p>

<p>maradns-0.9.02:

<p>Document reorganization: MaraDNS now uses a new document format, EJ
(which I created myself for MaraDNS documentation usage), which can
be converted in to HTML documents, text documents, or in to man page
sources.  By having a stramlined documentation format, MaraDNS' 
documentation will be easier to manage, and easier to translate.
<p>
Since the ej format allows other files to be embedded in documents,
this eliminates having to revise multiple versions of the same document
<p>
(2002.01.16)

<p>

<p>maradns-0.5.31:

<p>
Backporting of compression security patch to the MaraDNS 0.5.xx branch.
<p>
(2002.01.10)

<p>

<p>maradns-0.9.01:

<p>
Fixed security problem with the compression code which I found when
performing an audit on the code.  Other cleanup of the compression
code.
<p>
Updated the French documentation.
<p>
Added some more information to the MaraDNS tutorial.
<p>
Added (currently untested) Darwin (a.k.a. MacOS X) support.
<p>
(2002.01.10)

<p>

<p>maradns-0.9.00:

<p>
Plugged some memory leaks in the recursive code.
<p>
Added Thomas Seyrat's French translation of the documentation
<p>
Completed the tutorial
<p>
Fixed bug where the zoneserver needed the mararc file specified to start.
<p>
Updated documentation
<p>
(2002.01.06)

<p>

<p>maradns-0.8.99a:

<p>
OK, so I was wrong about the first post-0.8.99 release being MaraDNS
0.9.00.
<p>
This is simply MaraDNS 0.8.99 with a 2-line patch which fixes a problem where
MaraDNS 0.8.99 would crash.
<p>
(2001.12.17)

<p>

<p>maradns-0.8.99:

<p>
Since I found a some security problems when working on the 
MaraDNS-0.9.00 release, I am making this release available
which appears to addresses the security problems.
<p>
Changes since 0.8.35:

-  Jaakko's patch, in a modified form, has been applied.  
-  Documentation touchups.  
-  Askmara timeout increased.  
-  Solaris recursive support dropped until I can get my hands on my 
     Solaris CDs (and a PC to install Solaris on) in January (Solaris still
     has bugs which do not exist in Linux). 
-  Updated test bed to handle NS referrals which point nowhere
-  Found and fixed a bug where MaraDNS would not close UDP connections
     when sendto returned an error
-  Fixed a problem that mhash_put_data had, where the DNS cache could become
     inconsistant in certain circumstances.
-  Fixed two other spots in recursive.c (in two of the add_closer routines)
     which could have potentially caused inconsistant data in the cache.
-  Got remove.rng to work again.

<p>
I have changed the version number to maradns-0.8.99 to 
reflect the fact that the next release will almost certaintly be
MaraDNS 0.9.00.
<p>
(2001.12.08)

<p>

<p>maradns-0.8.35:

<p>
Made the stress tests in sqa/testbed more extensive; they now crash 
recursive MaraDNS versions up to and including 0.8.33.
<p>
Found and plugged some memory leaks that MaraDNS had.
<p>
Verified that MaraDNS can handle the stress tests--MaraDNS was able
to handle 80.000 queries without crashing, and without growing
after 10.000 or so queries were processed.
<p>
(2001.11.17)

<p>

<p>maradns-0.8.34:

<p>
Found and removed another crash-inducing bug.
<p>
Modified askmara so that it generates somewhat
csv1-compatible output.  Also modified the debug.hostname tool
so that it can handle the new askmara output.
<p>
(2001.11.16)

<p>

<p>maradns-0.8.33:

<p>
Yipee!  No, I'm not talking about the fact that the evil Taliban
are no longer in control of Kabul.  I am talking about the fact that
I found and removed another crasher bug in MaraDNS.
<p>
I hope that this is the last crasher bug.  Time to cross my fingers.
<p>
(2001.11.13)

<p>

<p>maradns-0.8.32:

<p>
This is the third beta test candidate for the recursive MaraDNS, since
people are reporting serious stability problems with MaraDNS 0.8.30 and
MaraDNS 0.8.31.  While I am unable to reporduce the problems offline,
I was able to reproduce the problem online (but only intermittently), and 
found some iffy-looking code which may be the root of the problem.  
<p>
This program passes all offline stress tests.
<p>
Also added an entry to the FAQ which answers an unrelated question 
posted to the mailing list, and added the changelog to the list of files
placed in the MaraDNS doc directory when a 'make install' is performed.
<p>
(2001.11.13)

<p>

<p>maradns-0.8.31:

<p>
This is the second beta test candidate for the recursive MaraDNS, since
I found some bugs after releasing MaraDNS 0.8.30.  See the release notes
for MaraDNS 0.8.30 for more on the beta starus of MaraDNS.
<p>
Looking through the source code of the revamped hash structure, I found
a routine which was not revamped.  This would cause a bug in the case
of having two or more zone files which happen to hash to the same 
value--only one of the zone files would load.  Fixed.  I also deleted
some routines which were based on the old hash structure.
<p>
I have modified MaraDNS so the csv1 hash no longer needs to be 
initialized, since the csv1 hash does nothing but waste memory in 
recursive-only MaraDNS configurations.
<p>
I have added another parameter: timeout_seconds, which is how long to wait
for a remote DNS server to reply.  This is mainly useful for slow
networks which need more than two seconds to get a reply from a DNS
server.  Note that the larger this is, the slower MaraDNS answers queries
when a DNS server doesn't respond to DNS requests.
<p>
In addition, I have begun work on the tutorial, which currently
describes how to use MaraDNS in recursive mode, and gives an overview
of DNS.
<p>
(2001.11.12)

<p>

<p>maradns-0.8.30:

<p>
This is a beta test candidate for the recursive version of MaraDNS.  Which
means that the only changes I will make between now and the first beta
release are essential bug fixes (e.g. bugs not mentioned in the man page),
and a basic DNS tutorial, since I have received two emails of the
form "I don't know how to do this DNS stuff, and could use some help".
<p>
The bad news is that, because of the excess of greedy lawyers in the US, I
have added the legal disclaimer to all of the man pages for MaraDNS, and,
in addition, the legal disclaimer appears when MaraDNS is started.
<p>
The good news is that it is possible to have MaraDNS not show the legal
disclaimer when opening up; MaraDNS tells you how to do this when showing the
disclaimer.
<p>
The better news is that I have done a major revamping of the MaraHash 
structure.  This structure is a structure that can both handle records 
being added, and being removed from the hash.  MaraDNS, as far as I can
tell from my offline tests, is now a great deal more stable as a result.
<p>
In addition, I found another memory leak in the recursive code, which I
have plugged.
<p>
I have also performed some more documentation touch-ups.
<p>
(2001.11.10)

<p>

<p>maradns-0.8.29:

<p>
OK, this is a "band-aid" release of MaraDNS.  As I was debugging the problem
with MaraDNS crashing with the new custodian, I discovered that the hash
code is fundamentally broken.  Hence, I need to a major revamp to the
hash code.  In short, the hash needs to have each hash spot point to
a linked list of elements.
<p>
In the meantime, I performed a band-aid fix to the hash that,
while not fixing the problem, makes the problem slightly less bothersome.
This is an interim release until I can really fix the problem this
weekend.
<p>
Updated the FAQ to reflect the slightly changed procedure for joinging the
MaraDNS mailing list ("subscribe" now has to be in the subject line when
one wants to join the list).
<p>
(2001.11.08)

<p>

<p>maradns-0.8.28:

<p>
I fixed a bug in the fila-handling code where chains of records were not
being correctly put at the top of the list.
<p>
I am still receiving reports that MaraDNS freezes up after running for
a while.  I am unable to reproduce this problem.  I have carefully checked 
the recursive code for potential deadlocks, finding none.
<p>
I suspect that there is a certain query which causes thie problem.
Theirfore, I have added the ability for MaraDNS to log all queries she
receives in human-readable format if verbose_level is three or higher.
<p>
While this results in some really huge logs, this will hopefully allow
me to pin down exactly which query causes MaraDNS to lock up, allowing me
to see where MaraDNS locks up, allowing me to resolve the issue.
<p>
(2001.10.31)

<p>

<p>maradns-0.8.27:

<p>
I have added a lot of code which creates a circular linked list.  This
circular linked list is used by the custodian to erase elements from
the cache which have not been recently accessed.
<p>
The psudo-random number generator has been renamed to 'rng', and modified
to be a hash-only primitive.  MaraDNS no longer has any code which can be 
directly used for cryptographic purposes.  Of course, the compression
function of the hash/prng is invertable, and can be used as a stream cipher,
but such is the case for all secure hash functions and secure PRNGs.
<p>
Added a list of features I will not add to the 1.x release of MaraDNS to
the MaraDNS man page.
<p>
The default max_glueless_level is now 10, because some real-world hosts
need a max_glueless_level this high.
<p>
(2001.10.31)

<p>

<p>maradns-0.8.26:

<p>
I have updated the 0QuickStart file to be current with the present
state of MaraDNS.
<p>
The Linux makefile now supports "make debug", useful for making a build
with verbose debugging output.
<p>
Now that I have some decent *roff documentation, I have done some 
improvments to the formatting of the man pages.  Not only do the man pages
look a little more attractive on the tty terminal, the man pages also
look good when made postscript man pages (troff -man -Tps foo.1 > foo.ps).
<p>
In addition, since the -man macros are not documented anywhere on the 
internet, I have somewhat deciphered the tmac.an macro set, and written
up some documentation describing all of the -man macros.
(2001.10.15)

<p>

<p>maradns-0.8.25:

<p>
I have done an audit and an overhaul of how MaraDNS calls locks in the
recursive code.  Hopefully, this will resolve the issues with MaraDNS
freezing after running for a few days.  
<p>
In addition, the recursive resolver now is better able to handle
instances where a NS record points to a list of IPs.
<p>
More documentation updates.  The man page for maradns now has a guide on
how to set up a firewall to allow maradns packets through, and a list of 
known issues where MaraDNS breaks the DNS spec.
<p>
The crypto-emasculated version of MaraDNS no longer binds the source port
of outgoing UDP queries.  This is because the underlying OS may generate
secure source port numbers when the source port is not specified in the
application.
<p>
(2001.10.12)

<p>

<p>maradns-0.8.24:

<p>
I have created a tool, called debug.hostname in the tools directory,
which gives a very verbose trace trying to look up a given hostname.  
This will hopefully help me to debug and fix problematical hostnames.
<p>
I have also created a tool, called faq2man which converts
the HTML faq in to a format suitable for embedding in to a man page.
This makes the FAQ section of the MaraDNS man page more attractive
<p>
I have made the maximum glueless level user-configurable, since it looks
like some hosts do not resolve with the old hard-wired default of 4.  I
have also made the maximum number of queries performed total in a 
recursive lookup user-configurable
<p>
I have added more helpful error messages which tell the user what to
fix in their mararc file if MaraDNS can not initialize the DNS cache or
the random number seed.  The init_cache() and init_crypto()
failed error messages should not be visible any more.
<p>
Documentation update:  There is now a man page description of the mararc 
file.  The CREDITS and FAQ files have been updated, in addition to almost 
all man pages.  For example, I have gotten rid of the two or three pages
of ugly troff syntax that Perl's pod2man program generates in the Man pages
which had this.
<p>
make run without ./configure now works again.
<p>
Since MaraDNS used to act in a different manner than Python 1.5.2 with
respect to multiple declations of the same index of the same dictionary
variable, I have changed MaraDNS so that she exits with a fatal error
should this occur, showing the user the line with the problem.
<p>
Made the error message which pops up when a csv1 zone file pointer is
incorrectly formatted more helpful.
<p>
There was a minor security weakness with the PRNG which would pop up if 
the seed was a fixed file, two copies of MaraDNS used the same seed
file, and the two files were started at the same time.  This has been fixed.  
The seed is now exclusive-ored with the process ID before generating numbers.
<p>
More trimming of unused routines in the AES code.  The AES code now only
supports encryption with a 128-bit key and block size in ECB mode--the
only way we use AES in MaraDNS.
<p>
For people who can not legally have any kind of cryptography in their
code (French citizens, etc.), there is now a script in the tools
directory, remove.aes which removes all crypto code.  Note that, 
while the main MaraDNS suite will still compile after running this, some 
programs in the tools/misc, test and sqa 
directories will no longer compile. make still works, of 
course.  Note that removing this code does make MaraDNS more suspectable 
to a spoofing attack. 
<p>(2001.10.08)

<p>

<p>maradns-0.8.23:

<p>
Star records which point to CNAMEs are now completely supported.
<p>
Christophe Colle pointed out that the reason MaraDNS was leaking memory 
when making threads on Solaris was because MaraDNS was not using 
pthread_attr_destroy.  Hopefully, adding this will make MaraDNS
not leak on Solaris.
<p>
Improvment to the "make install" process:  The default configuration
looks for local man pages in /usr/local/share/man if 
/usr/local/man doesn't exist.  This is to get around some
Linux distributions which don't have /usr/local/man
<p>
Minor security tweak to the routine that generates the 16-bit secure
psudo-random number.
<p>
The AES hasher now correctly generates a 128-version of the hash specified
in Bram Cohen's proposed AES hash standard.  Thanks to Bram for providing
test vectors for the 256-version of the hash.
<p>
maradns --version now also includes the build system and date
<p>
(2001.09.27)

<p>

<p>maradns-0.5.30:

<p>
Two bugs have been fixed: A bug where a UDP error message normally did
not have the correct query ID, and a bug where, in certain cases, MaraDNS
would return a UDP error instead of a SOA "not there" reply.
<p>
Also, the documentation has been updated. (2001.09.25)

<p>

<p>maradns-0.8.22:

<p>
Document reorganization: I am starting to move the formats of the data files
to separate man pages.  This will make each man page smaller and more
convenient to use.
<p>
Improved CNAME support: MaraDNS now has partial support for star records
that point to a CNAME.
<p>
Less code in the aes directory: I now have a program which generates the
AES tables during the build process, since the code to generate those
tables is a good deal smaller than the tables themselves.  There is no
slowdown, since it is a one-time calculation done during the build process.
<p>
maradns --version (and zoneserver --version) now do the right thing:
Print out the version number and exit
<p>
The installer now removes the zoneserver and the maradns server before
installing the new ones to get around the "text file busy" problem.
<p>
There was a subtle bug with returning "not there" SOA replies and
case insensitivity.  This bug has now been fixed.  This bugfix also
needs to be folded back in to the 0.5.xx branch.
<p>
It is now possible to change the class of the query with the getzone client
if possible.  Next: Document this new feature. (2001.09.24)

<p>

<p>maradns-0.8.21:

<p>
<p>
First, the bad news.
<p>
There is a known issue with MaraDNS having memory leaks when used as a 
recursive nameserver on the Solaris operating system.  This problem
does not exist in Linux.  Since I do not have ready access to a Solaris 
box to develop on, I can not resolve this issue.  Until a Solaris developer
steps up to bat and fixes this for me, I am forced to disable recursive DNS 
serving under Solaris.
<p>
I should have ready access to a Solaris again in December,
when I return to the United States.  I have CDs of Solaris eight up
there, in addition to friends with Solaris boxes.
<p>
Now, the good news.
<p>
I have updated the example mararc files to be consistant with the
documentation.  In particular, I now have two "out of the box" working
mararc files.  One for authoritative name serving, and another for 
recursive nameserving.
<p>
I have also updated the installer script to return an error if the 
directories to put the MaraDNS files in do not exist.  In addition,
MaraDNS will install all of the MaraDNS documentation in the directory
specified by the variable DOCS in install.locations.
<p>
Finally, I have updated the FAQ, the man pages, the mararc.format 
documentation, and am working on making separate man pages which describe 
csv1 zone files and the mararc file. (2001.09.20)

<p>
<p>maradns-0.8.20:

<p>
When doing some tests with the AES engine in MaraDNS, I found that
I inadvertently created a minor security problem w.r.t. ASCII nulls in 
the AES key.  Basically, an "out of the box" MaraDNS configuration had
a 1 in 16 chance of the aes key not having a full 128 bits of entropy.
<p>
I also corrected a minor fault in the aes128 hasher (it
did not previously fully follow the spec, since it counted bytes, not bits),
a minor fault with the top-level Makefile (which did not clean up
tools/misc with a make clean), and did some minor manpage clean-up.
(2001.09.18)

<p>

<p>maradns-0.8.19:

<p>
Updated the CREDITS file.  If you have contributed to MaraDNS in any way,
no matter how small, and are not in this file, please let me know so I can
credit you.
<p>
Removed references to routines in the aes/ directory which 
MaraDNS and aes128 do not use.  The aes code is now encrypt-only.
<p>
Added a test, based on Brian Gladman's AES reference code, which verified
that the AES routines are working correctly.
<p>
Some cleanup, corrections, and revisions of the man pages.  I figured out
how to turn off hyphenation and justifaction for man pages, and have hence
disabled these in all of the MaraDNS man pages.
<p>
Streamlining of the build process: ./configure; make; make install
now does "the right thing".  In addition, make uninstall also
automagically does the right thing.
<p>
Important: make install
now, by default, installs files in /usr/local/sbin, 
/usr/local/bin, and man pages in /usr/local/man.  If one
has previous installs of MaraDNS in other locations, please change the 
install.sh script to the desired location of the MaraDNS files.
(2001.09.17)

<p>

<p>maradns-0.8.18:

<p>
Added code which keeps track of allocated memory, allowing me to hunt down
and eliminate memory leaks.  Found four memory leaks in the recursive code:

-  in_bailiwick did not properly destroy the tempory string "get"
-  When a
negative answer was given, query_nameserver did not correctly deallocate
some temporary strings 
-  recurse_call did not correctly deallocate the temporary string used 
for glueless queries
-  The code that set up the root nameservers in the cache had two strings
which were used to help set up the root nameservers.  This strings were not
deallocated after being used.  This was a one-time, and not continuous, leak.

(2001.09.15)

<p>

<p>maradns-0.8.17:

<p>
Incorperated a modified form of Franky's patch which adds the max_tcp_procs
kvar to the program.  Added some non-DNS releated tools to the "tools" 
directory.  Clean up of the documentation. (2001.08.28)

<p>

<p>maradns-0.8.16:

<p>
More regression testing: Added test where it sends an answer to a server.  
If the server replies, this is considered an error condition.  Cleaned up
the recursive code (got rid of some XXX to dos): Mainly, MaraDNS sends an
error if she can not spawn a thread.  Documentation reorganized. (2001.08.16)

<p>

<p>maradns-0.8.15:

<p>
Made an 'asktest' program which will be used for regression testing.
(2001.08.15)

<p>

<p>maradns-0.8.14:

<p>
Added support for a counter that counts the children in the Zone server.
(2001.08.13)

<p>

<p>maradns-0.8.13:

<p>
Askmara doesn't display debug messages which can mess up terminals to the
end user any more.<p>
When an element in the cache is overwritten, the new data is now added 
to the cache.<p>
New feature: MaraDNS can now blacklist spammer-friendly DNS servers.
<p>
(2001.08.12)

<p>

<p>maradns-0.8.12:

<p>
Fixed bug in udperror which caused it to spit back the wrong query ID. <P>
Added code to use a counter to count the number of threads.  If we have more
than maxprocs threads going on at the same time, we refuse to launch a thread.
<P>Cached data now will go through round-robin rotates. 
<P>MaraDNS now compiles again when the locale is set to Spanish (though
I still need more Spanish translations.  Maybe when I am in México, I can
get help down there)
(2001.08.11)

<p>

<p>maradns-0.5.29:

<p>
Backported some bug fixes with zone file handling back to the "stable"
authoritative-only branch of MaraDNS.  (2001.08.10)

<p>

<p>maradns-0.8.11:

<p>
Improved handling of CNAME records in the cache.  BSD-dependent routines
(which are currently unused in MaraDNS) are not compiled if we are compiling
on a Solaris box.  (2001.08.08)

<p>

<p>maradns-0.8.10:

<p>
I have redone the makefile in the rijndael directory, some some makes
(notably, the one NetBSD has) did not like the original Makefile.
Marked some unreproducable bugs as unreproducable.
(2001.08.07)

<p>

<p>maradns-0.8.09:

<p>
After much work (handling lame delegations better and fixing a bug in
substring_issame_case), I have managed to get the host name
linuxemu.retrofaction.com to resolve. 
<p>
Completely unreleated to MaraDNS, I have added a SirCam filter to the 
tools directory.
(2001.08.03)

<p>

<p>maradns-0.8.08:

<p>
More bug swatting: 
- The problem that was causing www.fairytale-abuse.com to not resolve
    is fixed. (Better lame delegation handling)
- The problem that was causing www.cs.cmu.edu and 
    www.roaringpenguin.com to not resolve is fixed (Better case 
    sensitivity handling)

(2001.07.28)

<p>

<p>maradns-0.8.07:

<p>
Fixed the zoneserver so it too only answers questions.  Fixed two bugs in 
the getzone client: One where it would handle MX records incorrectly, 
another where it would hand the root zone incorrectly (this bug was actually
in the Queries.c file).  (2001.07.27)

<p>

<p>maradns-0.8.06:

<p>
We now check to make sure we only answer questions. (2001.07.18)

<p>

<p>maradns-0.8.05:

<p>
Added support for multiple root name servers.  Also changed the example 
mararc file to have the root servers for eight different top level
domain registries listed. (2001.07.16)

<p>

<p>maradns-0.5.27:

<p>
Back porting bug fixes to the authoritative-only branch of MaraDNS.
(2001.07.15)

<p>

<p>maradns-0.8.04:

<p>
MaraDNS now sucessfully compiles on Solaris.  Thanks to 
Franky Van Liedekerke for providing the pointers on how to do this,
and to Danny for access to a Solaris machine to compile MaraDNS on.
(2001.07.14)

<p>

<p>maradns-0.8.03:

<p>
Solaris support added, but does not fully work, added disclaimer, improved 
code which drops group privledges.
(2001.07.13)

<p>

<p>maradns-0.8.02:

<p>
Another bug fix: If a zone did not have a record of a given type at the
"top" of the zone, MaraDNS would attempt to perform recursion instead of
returning a SOA record in the authority section.  Fixed.  Also needs to
be fixed in the 0.5.xx branch.  Thanks to D Richard Felker III for 
finding the bug. (2001.07.10)

<p>

<p>maradns-0.8.01:

<p>
Touch up bug fix: MaraDNS failed to close open file descripters when reading
zone files.  Fixed.  Also needs to be fixed in the 0.5.xx series.
Thanks to Boris Manojlovic for finding the bug.
(2001.07.09)

<p>

<p>maradns-0.5.26:

<p>
Fixed a couple of long-standing bugs found while debugging the recursive
version of MaraDNS:

- Fixed a subtle bug in the DNS compression code that would only
    show up in certain rare circumstances.
- Fixed a bug in the handling of ANY DNS queries.

(2001.07.08)

<p>

<p>maradns-0.8.00:

<p>
This is the first alpha release of the recursive nameserver.  I fixed a bug
in the compression code, and fixed another bug which was causing problems with
glueless name server entries. (2001.07.08)

<p>

<p>maradns-0.7.22:

<p>
www.monty.de now successfully resolves; fixed bug where the custodian
could potentially erase the root name server entry, making MaraDNS 
non-functional as a root nameserver until restarted. (2001.07.07)

<p>

<p>maradns-0.7.21:

<p>
Type ANY queries now work for recursive queries.  Finally. (2001.07.06)

<p>

<p>maradns-0.7.20:

<p>
Another late night double feature MaraDNS show.  There was a really nasty
bug which Jaakko pointed out to me.  I found the culprit, and fixed the bug.
(2001.07.04)

<p>

<p>maradns-0.7.19:

<p>
Begun work on some of the infastructure changes needed to make MaraDNS 
sucessfully resolve recursive ANY queries.  Added maradns_gid support.  
Other pieces of code cleanup, primarily better handling of RR_ANY when
acting as an authoritative nameserver (should I fold these changes in to 
a 0.5.26 release eventually?).  (2001.07.04)

<p>

<p>maradns-0.7.18:

<p>
Re-arranging of the engine that returns an answer from the cache.  We check
the cache expire of a "host not here" reply.  Updated the documentation so 
that it is the 0.5.25 documentation with the recursive stuff added as
needed.  (2001.07.01)

<p>

<p>maradns-0.7.17:

<p>
We now choose a random DNS server to query when we are looking for an
answer. (2001.07.01)

<p>

<p>maradns-0.7.16:

<p>
Updated documentation to include information on how to set up a recursive
nameserver.  Fixed bug where multiple levels of CNAME indirection were not
being properly followed.  It is now possible to go to www.imdb.com or
groups.yahoo.com (both cases of multiple levels of CNAME indirection).  
(2001.06.30)

<p>

<p>maradns-0.7.15:

<p>
I have added support for negative caching: If a given host name
does not exist, the program sends a "not here" to the stub resolver.
I also fixed a bug which was causing out-of-bailiwock queries to not work.
(Having to do with the case-sensitivity issue).  Next: Getting www.monty.de
to work, caching ANY replies. (2001.06.28)

<p>

<p>maradns-0.7.14:

<p>
MaraDNS now works as a recursive nameserver again.  The root nameserver
is now user-configurable.  CNAME returns queries in a form that a stub
resolver can now understand.  (2001.06.25)

<p>

<p>maradns-0.7.13:

<p>
After much tinkering with the code, I have managed to make it so that 
a CNAME record in the cache returns the corresponding A record (note: only
one A record!) along with the CNAME record.  This should allow hosts like
www.yahoo.com to work when this is used as a stub resolver. (2001.06.24)

<p>

<p>maradns-0.7.12:

<p>
More work done on plugging memory leaks.  Working on code that will 
determine the ip for a given CNAME record, since stub resolvers are not
smart enough to do a second A query themselves when they see a CNAME
record.  Also some minor cleanups that Franky Van Liedekerke
suggested. (2001.06.22)

<p>

<p>maradns-0.7.11:

<p>
Finished work on the custodian.  Now, I need to make sure the custodian
works.  Also fixed CNAME support so it now works, plugged a couple more
memory leaks, and revised the offline testbed to have a CNAME record.
(2001.06.21)

<p>

<p>maradns-0.7.10:

<p>
Bigfixes: I have plugged some memory leaks, and added code which will
(hopefully) allow recursive queries to cname records to work.
I have also done some more work on the "custodian" code.
(2001.06.21)

<p>

<p>maradns-0.7.09:

<p>
Bugfix release: MaraDNS now closes the sockets that she opens when 
performing recursive queries.  This stops the open sockets from piling
up.  Also, I have begun work on the "custodian" code: Code the reduces
the number of elements in the cache when the user-defined cache runs
low on space. (2001.06.20)

<p>

<p>maradns-0.7.08:

<p>
I have made the RNG truly random, and I have added code to the resolution
algorithm which allows it to perform recursive queries when the only 
authoritative records are NS delegation records.  Also, updates to the
todo list.  Changed cc to gcc in all the makefiles to make
MaraDNS more Solaris-friendly.  (2001.06.20)

<p>

<p>maradns-0.7.07:

<p>
I have added ACLs which limit who is allowed to make recursive queries.
I have also begun work on making the random number seed truly random.
(2001.06.19)

<p>

<p>maradns-0.7.06:

<p>
I have updated the non-recursive code to use code from MaraDNS 0.5.25,
which adds a number of features from there (round robin rotation, etc.)
I have alos made a list of things which need to be done before I can
make this a beta candidate for a 1.0 release.  In addition, the code now
makes sure that the query ID we receive is the same one we sent out.
I have also started work on a CREDITS file, updated the FAQ, and added
a couple of interesting (if not MaraDNS-specific) Perl scripts to the
archive.
(2001.06.17)

<p>

<p>maradns-0.7.05:

<p>
The DNS server now has a psudo-random number generator which uses the
Rijndael algorithm.  This PRNG randomizes both the query ID and (I believe)
the source port of any and all DNS queries.   This PNRG now needs to become
secure (by setting up either a random or a user-defined Rijndael key)
(2001.06.16)

<p>

<p>maradns-0.7.04:

<p>
There were some bugs in the RR expire code.  I have found those bugs,
fixed them, and now cache expirery should work. (2001.06.12)

<p>

<p>maradns-0.7.03:

<p>
This release has implemented the ability to expire records from the cache.
All Name server records have a fixed expire of 1 day (this can be changed
by changing one #define in recursive.c), but all other records have an 
expire time based on the TTL of the record.  I have not yet tested
DNS RR expire.
(2001.06.11)

<p>

<p>maradns-0.7.02:

<p>

Milestone: This is the first release of MaraDNS that works as a recursive
nameserver with the real root nameservers.  Fix: Changing only the case of 
the first nameserver, add negative caching, then start adding security
(good RNG for the query ID and source port, recursive ACL), then start
making the root servers customizable (including being able to have different
TLDs have different root servers). (2001.06.11)

<p>

<p>maradns-0.7.01:

<p>

Beginning work on making MaraDNS both case-insensitive and able to preserve
case. (2001.06.06)

<p>
<p>maradns-0.7.00:

<p>

Albert Prats kindly provided Spanish translations for various text files.
To get MaraDNS to compile in Spanish instead of English, type in 
./locale.es before compiling MaraDNS.

<p>

MaraDNS now can handle gluelessness.  I am bumping up the minor version
number to reflect that MaraDNS now has recursive nameserving capabilities,
albeit without some security features.  Next:  Work on cache flushing and 
security.

(2001.06.03)

<p>

<p>maradns-0.6.21:

<p>

Now, if one of the IP nameservers is bad, we will try the next nameserver 
in the chain.  Next: Add the code to handle out-of-bailiwick nameservers
(2001.06.01)

<p>

<p>maradns-0.6.20:

<p>

Two big improvments: 1) The recursive resolver can now handle multiple
A records (MaraDNS deliberately ignores NS and AR records.  Note that it is
a good idea to give out the corresponding A record for a CNAME record
[To do]) 2) There is now code which makes a local copy of the chain
of NS records in an authoritative-only section, which will allow me to
make thread-safe code which will query other nameservers, should a given
nameserver not function (e.g. Someone changed a computer's IP.  In the
three weeks it can take Network Solutions to update the records on the
root nameservers, we still want to be able to reach the domain in question
by using the other listed nameserver for the domain)

<p>

<p>maradns-0.6.19:

<p>
Not only did I get to spend some time with my family this memorial day 
weekend, I also was able to get Linux up and going on my new laptop.  Took
two installs, but everything except SSL in Konqueror now works. 
I also, now that the new laptop is (mostly) up and going, have gotten
a chance to work on MaraDNS.  This new laptop, since it has a working battery,
should speed up MaraDNS development--I can now work on MaraDNS on the train.
The latest version is able to go to a remote server and give us an 
incomplete answer (only one RR) based on what the remote server tells us.  
(2001.05.29)

<p>
<p>maradns-0.6.18:

<p>
Some minor bugfixes and tweaks: The nameserver will now query name servers
until it is able to find an answer, then it will go in a loop.
(2001.05.24)

<p>

<p>maradns-0.6.17:

<p>
A fairly significant milestone: This version of MaraDNS is able to read data
from an authoritative nameserver, and, based on that data, determine the IP
of a nameserver closer to the answer we are looking for.  (2001.05.21)

<p>

<p>maradns-0.5.24:

<p>
Two minor bug fixes: The erre-con-erre-cigarro.maradns.org query will work,
even if authoritative nameservers for the root are set up; MaraDNS now
will run on systems which do not support the setrlimit system call, such
as the GNU Hurd. (2001.05.21)

<p>

<p>maradns-0.5.23:

<p>
Three bug fixes: MaraDNS now works with RRs for the root namserver (MaraDNS,
in fact, can now be a nameserver for the root), the askmara tool now has
a timeout (and can ask questions about the root nameserver), and the output
that MaraDNS generates is unbuffered.  (2001.05.19)

<p>

<p>maradns-0.6.16:

<p>
I have added a lot more debugging stuff as I hunt down why it is RRs are
not being added to the dns RR cache.  I think I am pretty close to pinning 
it down, and hope tomorrow's release can add RRs to the big cache.
(2001.05.18)

<p>

<p>maradns-0.6.15:

<p>
I added a simple interactive debugger which lets me see the state of
the DNS cache hash table.  Looks like the data from the server is not
being added to the cache.  Next: FInd out why not.  (2001.05.17)

<p>

<p>maradns-0.6.14:

<p>
An unexpected event forcing me to go home late yesterday caused there
not to be a release of MaraDNS yesterday.<p>
Fixed bug where it was not correctly appending the class to the server
that it was querying.  Temporarily disabled the actual threading while 
development work on the recurseor continues.  Next: Make sure that
the cache is properly seeded from data from authoritative nameservers.
(2001.05.17)

<p>

<p>maradns-0.6.13:

<p>
Fixed bug where it was choosing the wrong IP to query.  Automated
the process of setting up a testbed (which is completely self-contained),
so I can debug this on a variety of machines.  Next: Fix the timeout bug.
(2001.05.15)

<p>

<p>maradns-0.6.12:

<p>
MaraDNS compiles again.  Now, I need to go through all the code and 
iron out all of the bugs.  Testbed of MaraDNS configuration files
added. (2001.05.14)

<p>

<p>maradns-0.6.11:

<p>
More work on the recursive stuff done.  (2001.05.13)

<p>
<p>maradns-0.6.10:

<p>
More work on the recursive stuff done.  (2001.05.12)

<p>

<p>maradns-0.5.22:

<p>
Bugfix release: non-0 opcodes now correctly return a "NOT IMPLEMENTED" error
message.   Also, some minor cleanup in the documentation: star records
(*.example.com, etc.) are now documented. (2001.05.10)

<p>

<p>maradns-0.6.09:

<p>
add_closer_jsddip, add_closer_js, and add_closer_jsip now have a third
argument: Whether to overwrite or append to already existing data in the 
cache.  Since the autoconf stuff doesn't work with the development 
branch, I got rid of it for now.  Once this code gets stable, one of the 
Debian packagers can feel free to add the autoconf stuff again.
(2001.05.10)

<p>

<p>maradns-0.6.08:

<p>
Added in_bailiwick and cmp_dnames functions to recursive.c
(2001.05.09)

<p>

<p>maradns-0.5.21:

<p>
Feature enhancment: Added round-robin rotation of records and limits to the
number of records that can be displayed for a given answer to MaraDNS.
This will be the last feature enhancment for the 0.5.xx tree.  All changes
in the 0.5.xx tree will now be bug fixes.  Now, back to work
on the 0.6.xx series, starting off with integrating the 0.5.xx
changes. (2001.05.07)

<p>

<p>maradns-0.5.20:

<p>
Feature enhancment: We now make sure that the same AR record does not
show up twice in the AR section.  Thanks to Phil Homewood for pointing
out this problem. (2001.05.06)

<p>

<p>maradns-0.5.19:

<p>
Bugfix release: We now follow chains of records in the AR section.
The authoritative bit for an "RR_ALL" request is now determined by
the authoritative bit in the first RR found.  Thanks to Phil Homewood
for finding these bugs. (2001.05.06)

<p>

<p>maradns-0.6.07:

<p>
The askmara tool now uses select() to time out after three seconds.
Added a lot of code to the recursive lookup.  I now send a query to
the remote server, and receive the reponse.  Next: Code to process the
response and add the data to the local cache. (2001.05.06)

<p>

<p>maradns-0.6.06:

<p>
The recursive code now sucessfully seeds a root nameserver in to the cache.
Next: Code to query and get the response form that nameserver.
(2001.05.05)

<p>

<p>maradns-0.6.05:

<p>
Heavy debugging of the recursive stuff going on.  It is not fixed, but I
wanted to post something, however miniscule, before going to bed.  
(2001.05.04)

<p>

<p>maradns-0.5.18:

<p>
Addded new feature: default_rrany_set, which is used to change the
RRs returned when a RR_ANY query is sent to the MaraDNS server.  Thanks
to Phil Homewood who pointed out that this is sometimes needed.
(2001.05.03)

<p>

<p>maradns-0.6.04:

<p>
recursive text documented updated to reflect changes I made on the train.
Some other cleanup. (2001.05.02)

<p>

<p>maradns-0.6.03:

<p>
Wrote up document detailing the recursive algorithm that MaraDNS' 
recursive resolver will use.  Integrated the 0.5.17 bugfixes in to the
development tree. (2001.05.01)

<p>

<p>maradns-0.5.17:

<p>
Fixed bug in MaraDNS' handling of zone transfers where the response
is a single big RR instead of multiple small RRs.  Some other small
bugfixes. (2001.04.30)

<p>

<p>maradns-0.6.02:

<p>
I have the general structure of how I want to do the recursive name
serving in place.  The devil, however, is in the details.
(2001.04.28)

<p>

<p>maradns-0.6.01:

<p>
Fixes in MaraDNS-0.5.16 incorporated in to development branch.  Slowly
making progress on the recursive code. (2001.04.26)

<p>

<p>maradns-0.5.16:

<p>
Fixed bug in the zoneserver's handling of replies longer than 255 octets in
length.  Fixed problem in manpage and updated man page.  Special thanks to 
Phil Homewood for finding problems the zone server was having.
(2001.04.26)

<p>

<p>maradns-0.6.00:

<p>
Work on making MaraDNS recursive begins. (2001.04.26)

<p>
<p>maradns-0.5.15:

<p>
Fatal error messages caused by failed system calls now show the user the
error message that the system gave, in addition to MaraDNS' error
message. (2001.04.26)

<p>
<p>maradns-0.5.14:

<p>
 Added "no_fingerprint" feature which minimizes the
                MaraDNS-specific features, making it more difficult
                to determine which DNS server one is running.  (2001.04.23)

<p>

<p>maradns-0.5.13:

<p>Manpage for maradns added.  (2001.04.22)
<p>
<p>
maradns-0.5.12: 

<p>
Added better support for CNAME records: If the CNAME record
                points to an A record, and we have the A record "on file",
                MaraDNS will add the CNAME record to the ar section of the
                reply.  Also added support for getting the version number
                for maradns via a 'erre-con-erre-cigarro.maradns.org.' 
                TXT query.  Set things up so we can both a autoconf-based
                and a non-autoconf-based build process, and we can switch
                between the two.
                Next: Branch off to development again, because I need to 
                get the zone server multithreaded.  (2001.04.22)

<p>
<p>
maradns-0.5.11: 
<p>Tollef Fog Heen generously ran autoconf for MaraDNS.  The 
                build process now consists of './configure;make'".
                (2001.04.21)

<p>
<p>maradns-0.5.10: 

<p>Code cleanup: I added -Wall as an option in the libs, dns,
                and server directories.  Cleanup of all the warnings that
                -Wall generated.  Added /etc/mararc and
                /var/maradns/db.example.com to RPM file. (2001.04.20)

<p>
<p>
maradns-0.5.09: 

<p>
The server crashes were causes by pointers that were
                not correctly initialized to zero.  The pointers causing
                the crash have been initialized, and hopefully this one
                will be crashproof.  Next: Look for other incorrectly
                initialized variables.  (2001.04.20)

<p>
<p>
maradns-0.5.08: 

<p>
Begin a "stable" brach for the only-authoritative
                non-threaded nameserver.  Changed compiler option from
                -g to -O2.  Made RPM of MaraDNS-0.5.08.  (2001.04.19)

<p>
<p>
maradns-0.5.07: 

<p>
Plugged some memory leaks in the zoneserver which, while
                not currently a problem, could have been a problem if
                I had started coding threads before plugging the memory
                leaks.  Some of the leaks were is the js_string library,
                so that code base is a lot cleaner now.  Made the
                functions in ParseCsv1.c thread-safe.  My friend Fatma 
                generously supplied a German translation of the error
                strings in MaraDNS_en.h--we now have a MaraDNS_de.h which,
                while not perfect, will be appreciated by the Germans.
                (2001.04.18)

<p>
<p>
maradns-0.5.06: 

<p>
The zone server for MaraDNS can now be run from inetd.
                Due to the security implications of this (MaraDNS' IP-based
                ACLs stop working when run from inetd), this will be an
                undocumented feature.  (2001.04.18)

<p>
<p>
maradns-0.5.05: 

<p>
Phil Homewood generously supplied a patch that makes this
                compile on FreeBSD.  In addition, he fixed a bug in the
                Makefile in dns/Makefile which made it so bobbit.c 
                compiles instead of using the Linux-specific object file
                (Which I didn't catch, since make clean didn't remove it
                and make didn't recreate it).  I also fixed a bug in
                getzone.c which was introduced when I put the string
                literals in a language-specific file. (2001.04.17)

<p> 

<p>
maradns-0.5.04: 

<p> Added more support for dotted decimal IPs in NS, CNAME, and
                MX records.  Added handles for code which will warn the user
                of the presence of these dotted-decimal IP records.  Fixed
                bug where js_copy was not returning an appropriate value on
                success (2001.04.17)

<p>
<p>maradns-0.5.03: 

<p>
If a "give me all records for a given hostname" query appears,
                MaraDNS will now look for a CNAME with the same hostname,
                returning only that if found (and she will only look for a
                CNAME if an A and MX were not found), and if A, MX, and
                CNAME records are not found, MaraDNS will see if the person
                entered a dotted decimal ip and respond appropriately.
                (2001.04.16)

<p>
<P>maradns-0.5.02: 

<p>
Most of the text messages that MaraDNS' various utilities 
                generate have been moved to separate files, which will make 
                localization easier.  (2001.04.16)

<p>
<P>

